CVE-2018-6354

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...

CVE-2018-6354

CVE-2018-6354 concerns a cross-site scripting vulnerability in Formspree, specifically in the file templates/forms/thanks.html. The issue is triggered by the _next parameter and existed in versions prior to 2018-01-23. The connected Red Hat, CNVD, CNVD-like, OSV, and CVE record pages corroborate ...